$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa File: a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa (raw, json) Hash identifier: VVYTXUA9T6Zlya6juSOuMni0q/hPDFefpuZSJWMUkSU= Subject key identifier: 28:6E:B6:49:4A:F1:B8:39:32:19:BA:88:65:1A:33:45:1C:C5:89:56 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584BBE402A8EF39BCE885CE85560 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 61317 IP address blocks: 206.127.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2a:8e:f3:9b:ce:88:5c:e8:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=139d32e0-71e7-4263-b794-4cfb2627db32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:9b:bf:7e:06:4b:0a:5f:c2:89:52:9b:98: dd:39:f2:86:68:b7:e5:83:1c:cd:0f:e9:21:e9:e0: 60:ad:2b:90:fa:b1:c9:fa:5e:3a:5e:01:05:a7:f9: 0b:31:46:b2:0a:95:52:0a:88:cc:68:3a:62:61:df: d5:ca:6c:4d:b9:b6:d8:86:e0:9a:d3:29:9e:9a:8a: cc:7f:bf:d9:02:1f:7e:ca:0e:23:b9:76:ba:2a:6d: e4:fa:fb:31:c9:d1:34:35:3f:8f:16:31:69:5f:52: 94:0f:f1:eb:8a:d6:48:b5:8e:18:52:0e:05:34:b6: 1d:d4:98:d0:5c:cc:aa:d8:e8:f6:59:43:f9:4d:c4: a8:5a:2d:8a:ac:a4:d8:f7:99:73:6d:93:0f:2d:25: e5:9e:cb:67:a2:b9:f5:65:00:3c:98:b0:81:fb:33: c3:5a:1c:3a:ae:d6:ab:bc:26:72:f5:b1:1c:b9:2c: 60:41:4c:dc:de:c2:56:fd:d5:09:51:58:ed:1a:4f: d5:ff:4f:8e:89:f9:47:d3:d2:c1:a5:29:41:48:4f: 52:2f:58:b3:e3:bd:98:fb:54:fa:38:e0:27:b5:d8: 1e:96:7d:27:67:1d:b7:29:e1:34:e5:4c:91:17:d3: 09:5b:c2:3a:f3:cb:57:64:4f:ed:85:73:df:a7:ee: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6E:B6:49:4A:F1:B8:39:32:19:BA:88:65:1A:33:45:1C:C5:89:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 206.127.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b6:00:9d:3e:0a:90:6a:26:f2:f5:d6:ba:f9:ea:cd:cd:5c: 0d:fe:cc:2a:04:da:ef:6a:04:64:32:f7:d5:82:e5:fb:a3:85: 1d:4c:37:a3:53:67:77:d6:77:89:eb:da:9a:d8:c7:19:80:4a: 88:4e:c8:64:99:38:ff:3f:6a:09:53:4f:e2:a8:bb:dc:69:c2: ba:a2:73:4d:26:bd:c5:54:d6:37:d3:1a:32:22:ef:a3:36:9f: c5:66:c5:31:60:9e:e6:d9:07:f0:63:dc:a8:79:27:33:7c:dc: b6:44:ea:80:2c:54:2b:08:b2:a9:fd:31:a2:54:e5:23:64:fe: bc:91:ed:23:8d:cf:f5:a7:5e:b4:f7:55:e7:c4:54:c9:61:31: 24:36:fd:ac:7a:5b:21:07:a0:b2:57:7b:99:28:ce:8e:50:b1: b5:56:1a:d1:91:51:f2:a9:6d:88:8b:43:94:0d:68:96:f8:c2: 30:79:7f:99:f8:3f:5e:23:ef:2e:5b:66:55:44:94:b9:48:1f: e1:27:52:dc:00:86:e3:15:82:a0:f1:7e:d3:de:0e:47:2a:92: ce:ce:b5:99:45:60:d8:fb:31:99:e0:f3:f6:52:14:32:94:e4: c3:28:d6:0b:6b:68:29:c4:ac:6b:d7:94:e8:fb:0d:65:52:fc: 6b:cf:57:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QCqO85vOiFzoVWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MTM5ZDMyZTAtNzFlNy00MjYzLWI3OTQtNGNmYjI2MjdkYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjGbv34GSwpfwolSm5jdOfKGaLflgxzND+kh 6eBgrSuQ+rHJ+l46XgEFp/kLMUayCpVSCojMaDpiYd/VymxNubbYhuCa0ymemorM f7/ZAh9+yg4juXa6Km3k+vsxydE0NT+PFjFpX1KUD/HritZItY4YUg4FNLYd1JjQ XMyq2Oj2WUP5TcSoWi2KrKTY95lzbZMPLSXlnstnorn1ZQA8mLCB+zPDWhw6rtar vCZy9bEcuSxgQUzc3sJW/dUJUVjtGk/V/0+OiflH09LBpSlBSE9SL1iz472Y+1T6 OOAntdgeln0nZx23KeE05UyRF9MJW8I688tXZE/thXPfp+6KqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChutklK8bg5Mhm6iGUaM0UcxYlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYTE5ZGQyYzQtNjZkNy0z MWVkLWJkYTQtMTMxYjVjYjkxODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm2AJ0+CpBqJvL11rr56s3NXA3+zCoE2u9qBGQy99WC5fujhR1MN6NT Z3fWd4nr2prYxxmASohOyGSZOP8/aglTT+Kou9xpwrqic00mvcVU1jfTGjIi76M2 n8VmxTFgnubZB/Bj3Kh5JzN83LZE6oAsVCsIsqn9MaJU5SNk/ryR7SONz/WnXrT3 VefEVMlhMSQ2/ax6WyEHoLJXe5kozo5QsbVWGtGRUfKpbYiLQ5QNaJb4wjB5f5n4 P14j7y5bZlVElLlIH+EnUtwAhuMVgqDxftPeDkcqks7OtZlFYNj7MZng8/ZSFDKU 5MMo1gtraCnErGvXlOj7DWVS/GvPV5E= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:26 2025 by rpki-client